Comparing Routers:

 

IKEv1 vs IKEv2

IKEv1 is not used at all. IKEv2 provides several enhancements compared to IKEv1, including:

• EAP authentication. IKEv2 can use an authentication, authorization, and accounting (AAA) server to remotely authenticate mobile and PC users and assign private addresses to these users. IKEv1 does not provide this function and must use Layer 2 Tunneling Protocol (L2TP) to assign private addresses.

• IKEv2 simplifies the SA negotiation process. IKEv2 uses two exchanges (a total of four messages) to create an IKE SA and a pair of IPsec SAs, as compared to the six messages exchanged in IKE v1. To create multiple pairs of IPsec SAs, only one additional exchange is needed for each additional pair of SAs.

• Support for asymmetric authentication.

• Built-in NAT traversal.

• Support for FlexVPN.